CVE-2021-47795
MEDIUM EXPLOITEDGeoVision GeoWebServer 5.3.3 - Path Traversal and Remote Code Execution via WebStrings.srf Endpoint
Title source: llmExploitation Summary
CVE-2021-47795 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including Ken Pyle.
AI-analyzed exploit summary This exploit demonstrates multiple vulnerabilities in GeoVision Geowebserver <= 5.3.3, including LFI, XSS, and RCE via improper input sanitization. It provides specific attack vectors and payloads for exploitation.
Description
GeoVision GeoWebServer 5.3.3 contains multiple vulnerabilities including local file inclusion, cross-site scripting, and remote code execution through improper input sanitization. Attackers can exploit the WebStrings.srf endpoint by manipulating path traversal and injection parameters to access system files and execute malicious scripts.
Exploits (1)
This exploit demonstrates multiple vulnerabilities in GeoVision Geowebserver <= 5.3.3, including LFI, XSS, and RCE via improper input sanitization. It provides specific attack vectors and payloads for exploitation.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N